Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/b9l5sinWdqskbev4cuOxwSEYd68.roa
File:                     b9l5sinWdqskbev4cuOxwSEYd68.roa (raw, json)
Hash identifier:          qnq/UFSTcLvSI/5FTEwaMtiCFn9CDv5K60YTyMFcpss=
Subject key identifier:   6F:D9:79:B2:29:D6:76:AB:24:6D:EB:F8:72:E3:B1:C1:21:18:77:AF
Certificate issuer:       /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial:       0194244504F8A112C05EA9F268D9240AF7F0
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/b9l5sinWdqskbev4cuOxwSEYd68.roa
Signing time:             Wed 01 Jan 2025 23:48:10 +0000
ROA not before:           Wed 01 Jan 2025 23:48:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44138
IP address blocks:        193.28.94.0/24 maxlen: 24
                          2001:67c:1b0c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:04:f8:a1:12:c0:5e:a9:f2:68:d9:24:0a:f7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
        Validity
            Not Before: Jan  1 23:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6fd979b229d676ab246debf872e3b1c1211877af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:ec:57:57:11:08:1d:b5:82:a9:7e:f7:4f:
                    ce:39:10:81:50:e9:09:8f:37:a3:d3:f5:f6:48:08:
                    06:24:b5:e1:cd:37:17:3f:63:f2:e3:c1:05:28:1e:
                    46:88:1d:44:6d:a4:f2:93:23:e2:e2:1c:98:14:9c:
                    b4:1a:ba:29:bf:e5:a1:ff:2a:16:12:18:7c:41:08:
                    d6:59:63:66:67:7c:40:40:94:f7:69:1c:53:09:e2:
                    38:8a:18:8a:d6:e8:39:b4:29:4a:92:73:09:a7:fd:
                    8a:87:a9:cf:83:9d:c9:f8:d4:27:45:82:71:35:48:
                    7e:4d:eb:55:cf:00:ec:81:20:8a:b1:61:3e:dd:c1:
                    fd:8e:f4:32:ed:c6:ed:40:f2:cf:0a:c6:55:8b:77:
                    9a:49:69:5a:05:ac:31:69:c6:10:3e:27:0a:cf:d8:
                    50:38:f4:a9:44:44:60:13:91:3b:4e:e2:a1:86:f2:
                    17:53:9c:dd:1a:e6:83:2c:9b:bc:bd:c3:ab:c1:97:
                    91:21:fc:4c:3b:cb:fd:04:04:0f:93:19:d5:0c:fa:
                    ac:c9:00:7e:98:13:ce:5c:1e:cb:bc:3f:95:3f:36:
                    25:ea:80:f8:6f:50:7d:4a:61:b4:3d:84:fe:09:52:
                    3e:10:3b:cf:76:d2:e9:53:62:84:07:5a:3f:b6:cc:
                    19:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D9:79:B2:29:D6:76:AB:24:6D:EB:F8:72:E3:B1:C1:21:18:77:AF
            X509v3 Authority Key Identifier:
                keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/b9l5sinWdqskbev4cuOxwSEYd68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.28.94.0/24
                IPv6:
                  2001:67c:1b0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:d2:f4:90:e2:c7:1f:af:f4:4e:15:50:5d:79:ed:cc:39:3f:
         16:3a:0b:1c:c9:c3:d1:2b:88:2c:cf:64:24:4d:1d:43:31:34:
         a0:ac:51:ce:9a:66:d2:aa:f1:ba:2e:ba:b9:8f:0a:92:09:98:
         63:c7:9b:bc:4c:37:76:57:13:c1:03:37:79:8d:46:ab:35:06:
         6b:c2:a0:97:95:ad:5a:74:64:0b:66:b5:94:2d:b0:bd:57:41:
         47:e5:21:eb:83:70:90:31:c6:4a:a0:3e:a4:fd:93:cf:1b:1b:
         2a:f2:d6:43:62:f2:f6:c2:a5:4f:1b:e2:9e:e7:99:25:42:e8:
         b0:11:39:f0:8a:4d:36:ac:70:88:09:be:4e:d4:06:a6:77:6b:
         83:27:a7:19:09:15:6e:68:47:d0:97:a5:34:60:01:bb:fc:6f:
         fa:b0:d2:96:31:fa:a2:fe:79:56:b9:74:9f:34:56:f1:6e:79:
         f9:64:31:07:74:dd:c1:61:95:93:bb:09:ec:eb:64:8e:8d:56:
         57:41:05:b2:b7:50:1a:ca:6c:81:0c:64:b3:cb:67:14:b6:25:
         6a:d5:5a:1f:63:b6:2c:30:cb:17:0a:aa:96:53:1c:d4:8d:81:
         98:62:4a:56:28:e2:0c:8e:64:d2:b6:54:fd:c6:5a:a7:6e:67:
         0b:8a:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----